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We show how to use decoherence-free subspaces over coUective-noise quantum channels to convey 
classical information in perfect secrecy. We argue that codes defined over decoherence-free subspaces 
are codes for quantum wiretap channels in which the gain of information by a non-authorized receiver 
is zero. We also show that if some symmetry conditions are guaranteed, the maximum rate on which 
these secret communications take place is equal to the Holevo-Schumacher- Westmoreland capacity 
of the quantum channel. 
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I. INTRODUCTION 

Preventing errors in quantum information is one of the 
main objectives of Quantum Information Theory. Errors 
can arise from the coupling of the system of interest to the 
environment, and the subsequent decoherence induced by 
this coupling. Because of the fragile nature of quantum 
states, decoherence is considered as the main obstacle in 
the transmission of coherent information [1]. 

In the context of Quantum Communications, 
decoherence is responsible for the information leak- 
age out to the environment in a noisy quantum channel. 
If secret messages are conveyed through it, at least part 
of them can be gathered by a non-authorized receiver 
called wiretapper. This situation is undesired in a 
cryptographic scenario and must be avoided. 

Cai et. al [2] and Devetak [3] modeled this scenario 
in the so called quantum wiretap channels. They also 
established the conditions to perform classical informa- 
tion exchange without being deceived by a wiretapper. 
In their formulation, only codes that minimize the error 
decoding probability and that maximize the equivoca- 
tion of the wiretapper are adequate. But the maximum 
rate in which the secret communication takes place, the 
quantum secrecy capacity, is usually below the ordinary 
capacity of the channel to convey classical information. 

For overcoming decoherence, some good methods 
have been proposed such as quantum error-correcting 
codes, dynamical decoupling, decoherence-free subspaces 
(DFS), and so on [4]. Regarding DFS, in particular, 
if the error operators that affect the qubits have some 
symmetries, then the qubits will suffer from the same 
noise in quantum channel and that will compensate the 
effects, keeping the invariability of these states, i.e., no 
decoherence takes place in such subspaces [5]. Therefore, 
these subspaces seem to be suitable to construct codes 
that minimize the information leakage out to the envi- 
ronment. 

So far, some works in the literature already explore the 
potential of DFS in Quantum Communications. All of 
them consist of protocols against certain types of collec- 
tive noise (such as rotation, dephasing, amplitude damp- 



ing, among others) and consider the use of small DFS 
(with two or three qubits, for instance) [6-10]. Even ex- 
perimental realization were already implemented aiming 
at quantum information processing [11-14]. In the per- 
spective of these works, the protection of information 
means avoiding the loss of coherence, maintaining the 
fidelity of the quantum states. 

In this paper, we investigate more general conse- 
quences of using DFS in Quantum Communications from 
the perspective of secure message exchange. We state a 
formal definition of quantum channels which satisfy the 
DFS symmetry criteria, define codes over their subspaces, 
and also establish the conditions to perform secret com- 
munications in this scenario. We conclude that any code 
defined with such characteristics is also a code suitable for 
quantum wiretap channels. Moreover, the secrecy capa- 
city in such subspaces is equal to the Hole vo- Schumacher- 
Westmoreland (HSW) capacity in these quantum chan- 
nels. This is a particular case in which the secrecy capa- 
city is maximal. 

The rest of this paper is structured as follows. The con- 
ditions for quantum privacy, established by Schumacher 
and Westmoreland [15], as well as the concepts regarding 
quantum wiretap channels are recalled in Section II. The 
fundamentals on DFS are introduced in Section III. Our 
contributions are stated in Section IV. A detailed exam- 
ple illustrating the results obtained is shown in Section 
V. Lastly, final remarks are presented in Section VI. 



II. QUANTUM PRIVACY AND QUANTUM 
WIRETAP CHANNELS 

Suppose that a sender (Alice) prepares a quantum sys- 
tem B in an initial state p. Her objective is to send this 
system to a specific receiver (Bob) through a noisy quan- 
tum channel, denoted by the superoperator This 
way, the state of the system received by Bob is denoted 
by PBob = £^{p)- 

Due to the presence of the noise, to provide a unitary 
description of the evolution of pBoh along the channel it 
is necessary to consider the interaction with the environ- 
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merit which is initially defined to be in a pure state \0e)- 
In this case, the superoperator is given by 

f^(p)=TrsC/^^(p®|OE>(OE|)f/^^^ (1) 

where stands for a unitary interaction operation. 

Suppose that Alice is using this quantum channel to 
send classical information to Bob. Alice then prepares 
the quantum system B into one of the possible states 
Pk with a priori probabilities pk- To decode the mes- 
sage received, Bob performs measurements using some 
decoding observable. The amount of classical information 
conveyed from Alice to Bob, which we will denote Heob, 
is governed by the Holevo quantity x^°^i defined as 



Bob 



<5'(pBob) - ^PkS (pBob.fe) 



(2) 



Some considerations about the Holevo quantity in this 
scenario must be mentioned: (i) Hsob < regardless 
of the decoding observable chosen; and (ii) Hsob can be 
made arbitrarily close to x^°^ through a suitable choice 
of a code and decoding observable. In this case, x^°^ 
represents an upper bound on the classical information 
conveyed from Alice to Bob. 

When considering the cryptographic purposes of the 
channel, then the eavesdropper (Eve) must have access to 
some or all of the environment E with which B interacts. 
The evolution superoperator £^ describes all effects of 
the eavesdropper on the channel or, in other words, all 
of the efforts to wiretap the channel between Alice and 
Bob are contained in the interaction operator U^^. This 
way, the information available to Eve, denoted by Hevo, 
will be limited by: 



S'(pe 



(3) 



The inequality Hevc < X^™ holds whether Eve has ac- 
cess or not to the entire environment. 
The quantum privacy is defined as 



P — HBob — H 



■-Eve 



(4) 



Alice and Bob wish to make P as large as possible. But, 
they must assume that the eavesdropper is acquiring 
her greatest possible information from the channel. The 
guaranteed privacy, Pq — inf P, is the infimum over all 
possible strategies adopted by Eve. Since Hevc < X^™) 
then Pg > Heob — X^™- On the other hand, Alice and 
Bob will want to use the channel to make the guaranteed 
privacy Pq as great as possible. Let V = supPc- The 
best scheme they use aims to make Heob close to x^°^- 
This way, we denote V as 



Despite the characterization of the quantum privacy, 
it is necessary to characterize schemes that describe how 
Alice and Bob should proceed to establish the channel 
properties to perform secure communications without 
being deceived by a wiretapper. To do so, Cai et al. [2] 
and Devetak [3] simultaneously characterized the quan- 
tum wiretap channels, defined as follows. 

Definition 1. A quantum memoryless wiretap channel 
is described by a pair of superoperators £^ and £^ from 
a complex Hilbert space %. When Alice sends a quan- 
tum state uj from "H**", Bob receives f ^"'^(o;) and Eve 
receives £'^"'^{uj), where n is the dimension of the input 
Hilbert space. 

The codes used by the legitimate participants of the 
communication are characterized in Definition 2. 

Definition 2. A set of codewords of length n (n ~ 
dim{'H) ) for a set hi of classical messages is a set of input 
states labeled by messages in lA, n{U) ~ : u e U}, 

and a decoding measurement of length n for the set hi of 
messages is a measurement on a length-n output space 
of the channel with outcome in hi , i.e., a set of posi- 
tive operators u £ hi with X^uew — "^^^ pair 
{U,{hl), : u S hi}) is called a code of length n for the 
set hi of messages. The rate of this code is ^log|Z^|. 

The Figure 1 synthesizes the quantum wiretap chan- 
nel general idea. Alice creates a quantum state uj(u) 
when she wants to send the message u E hi to 
Bob. Due to the noise. Bob receives £^'^'-^ {uj{u)) — 
Tie [^'^"(p® \0e} {Oe\)] and decodes it using a positive 
operator- value measurement (POVM) : u Ehi}, that 
results in an estimate u' for u. Eve, in turn, receives the 
state £»"^-^(a;(M)) = Trs ®"(p » lO^) (ObI)] and will 
try to obtain as much information as possible from the 
message sent by Alice. To do so, she will try to build a 
POVM based on the typicality of the states measured by 
her following a strategy presented in [2, Sec. 4]. 
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FIG. 1. General idea of the quantum wiretap channel. 

However, despite the strategy of communication has 
been depicted, the arguments of security regarding the 
message exchanged have not been defined yet. It is 
necessary to ensure a small decoding error probability 
between the legitimate participants of the communica- 
tion while the wiretapper learns almost nothing of the 
secret message. The formalization of these two require- 
ments is presented in Definition 3. 
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Definition 3. (Wiretap Code) A code 
(fl(U), {Vu : u U}) of length n is called a wiretap 
code with parameters (n, \U\ , A, /i) if, for X,fi> 0: 

= 1 - M ^ [5«"^^(c.(«))2?„] < A (6) 

and 



its relative phase is erased and, thus, the information it 
carries is lost [16]. In this section, we will show how 
to avoid these undesired effects despite the existence of 
decoherence. 

Let a closed quantum system be composed by the sys- 
tem of interest S defined on a Hilbert space H and by 
the environment E. The Hamiltonian that describes this 
system is defined as follows: 




(7) 

where ^ log \U\ is called the code rate. 

In this definition, Eq. (6) guarantees that the decoding 
error probability for Bob is, on average, smaller than A; 
and Eq. (7) bounds the average accessible information 
in such a way that the wiretapper can obtain (almost) 
nothing about the message sent by Alice. 

Lastly, the quantum secrecy capacity is defined as: 

Definition 4. ( Quantum Secrecy Capacity [2]) The se- 
crecy capacity of a quantum channel is the maximum real 
number C's such that for all e,X,iJL > and sufficiently 
large n there exists a (n, \U\ , A,^) code with: 

Cs<-\og\U\+t (8) 
n 

Despite the previous definitions assume messages uni- 
formly distributed, the following theorem about the se- 
crecy capacity due to [2, Sec. 5] is a more general result. 

Theorem 1. For a quantum wiretap channel £ as 
characterized in the Definition 1, the quantum secrecy 
capacity satisfies: 

CsiS) > max - X^™] (9) 

where the maximum is taken over all probability distri- 
butions P over 14; and x^°^ ^^'^ X^™ are the Holevo 
quantities given in Eqs. (2) and (3), respectively. 

The quantum secrecy capacity can be understood as 
the maximum rate in which is possible to convey clas- 
sical information in perfect secrecy through a quantum 
channel. It is equivalent to the supreme of the guaran- 
teed quantum privacy defined in Eq. (5). A particular 
characteristic of the quantum secrecy capacity is that it 
does not have a single-letter characterization, i.e., it is 
not computable since it considers all the input states and 
also all probability distributions over them [2, 3]. 

III. DECOHERENCE-FREE SUBSPACES 



H = Hs(g)l£;-)-ls«)H£; + H5£; (10) 

where 1 is the identity operator; and Hg, and Hsb 
denote the Hamiltonians of system, environment and 
system-environment interaction, respectively. 

In order to prevent errors, it would be ideal that Mse 
were equal to zero, indicating that system and environ- 
ment are decoupled and evolve independently and unita- 
rily under their respective Hamiltonians Hg and H^; [5] . 
However, in practical scenarios, such an ideal situation 
is not possible since no system is noiseless. So, after iso- 
lating a system to the best of our ability, we should aim 
for the realistic goals of the identification and correction 
of errors when they occur and/or avoiding noises when 
possible and/or suppressing noise in the system [4]. 

If some symmetries exist in the interaction between 
the system and the environment, it is possible to find 
a "quiet corner" in the system Hilbert space not expe- 
riencing decoherence. Let {Ai{t)} be a set of operators 
in the operator-sum representation (OSR) corresponding 
to the evolution of the system. We say that a system 
density matrix ps is invariant under the OSR operators 
{A^it)} if J2i'^i(t)PsAl{t) = PS. We are now able to 
define the DFS whose states are invariant despite a non- 
trivial coupling between the system and the environment. 

Definition 5. A subspace % of a Hilbert space % is called 
a DFS with respect to a system- environment coupling if 
every pure state from this subspace is invariant under 
the corresponding OSR evolution for any possible envi- 
ronment initial condition: 

Y,A,{t)\k){k\A\{t) = |fc)(fc|,V|fc)(fc| e H,Vp£(0) (11) 

i 

Let the Hamiltonian of the system-environment inte- 
raction be — Sj (g) Ej , where Sj and Ej are 
the system and environment operators, respectively. We 
consider that the environment operators Ej are linearly 
independent. The symmetries required to define a DFS 
are described in the theorem below. For a detailed proof 
or different formulations see [5, Sec. 5]. 

Theorem 2. {DFS Conditions) A subspace H is a DFS 
iff the system operators Sj act proportional to the iden- 
tity on the subspace: 



Due to decoherence, a quantum system begins to lose 
energy into the environment and decay to a ground state. 



S,\k)^cj\k) yj,\~k)eH (12) 
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In practice, identifying a useful symmetry and taking 
advantage of it can be very difficult. One must (i) iden- 
tify the symmetry, (m) find the states which are invariant 
to the interaction, and (Hi) construct, if possible, oper- 
ations on the system which will serve as a universal set 
of gating operations while preserving the necessary sym- 
metries [4]. 

Quantum codes constructed from states of a DFS 
are classified as quantum error-avoiding codes (QEAC) 
and the tasks of perturbation and recovery on them are 
trivial. They can be contrasted with quantum-error cor- 
recting codes (QECC) in some aspects. While QECCs are 
devised to correct errors after their occurrence, QEACs 
do not have the ability to correct errors since they avoid 
them; QECCs devised in practical circumstances belong 
to the class of non-degenerate codes while QEACs are 
highly degenerate; QEACs usually require a lower num- 
ber of physical qubits to encode one logical qubit than 
QECCs. In particular, if the degeneracy attains the max- 
imum, a QECC reduces to a QEAC what illustrates a 
circumstance in which a type of code becomes equivalent 
to the other [17]. 

The absence of decoherence in DFS has been shown 
as of major importance for implementations of quantum 
memory and quantum algorithms. Other applications of 
it cover encoding information in quantum dots, collective 
dissipation, noise reduction, among others [4, 5]. 



IV. DFS IN SECURE QUANTUM 
COMMUNICATIONS 



We will now examine the use of DFS in Quantum Com- 
munications. We will consider the use of collective noise 
quantum channels, i.e., a model of quantum channels in 
which several qubits couple identically to the same en- 
vironment, while undergoing both dephasing and dissi- 
pation [18]. This particular case gives a light into some 
interesting consequences of the use of DFS in quantum 
communications. Our focus, in particular, will be in the 
aspects of secure message exchange. 

We consider the case that Alice wants to convey se- 
cret classical messages through a quantum channel to 
Bob. These messages must be protected from a wiretap- 
per Eve that has full access to the environment. The 
channel between Alice and Bob has a decoherence-free 
subspace whose states will be used to encode the se- 
cret message. The following definition characterizes such 
quantum channel. 

Definition 6. (Collective Noise Quantum Wiretap 
Channel) A collective noise quantum wiretap channel 
£ is a channel as in Definition 1 such that its Kraus 
decomposition {Ai\ satisfies Theorem 2. 

Since {Ai] satisfies Theorem 2, then the channel 8 has 
a decoherence-free subspace T-L. When Alice wants to 
send a message to a Bob, now she can make it using a 
QEAC with the following definition. 



Definition 7. Let H be a DFS spanned by a set of 
eigenvectors {\k)}, i.e., % — Span[{\k)Y\. A set of code- 
words of length n (n = dim{'H)) for a set lA of clas- 
sical messages is a set of input states labeled by mes- 
sages in U, K{1A) = {k{u) : u € U} C 'H, and a 
trivial decoding measurement composed of a set of pos- 
itive operators T)^, u Cz U with X^uew — '^^^ pair 
{K{U), : u e hi}) is called a QEAC of length n for 
the setU of messages. The rate of this code is ^\og\lA\. 

Without loss of generality, we will consider here that 
the environment starts in a pure state |0e) (Oe|. This 
is a clear assumption since we can always imagine that 
a "local" environment in a mixed state is just part of a 
larger system in a pure entangled state [15]. 

Using the code defined, if Alice wants to send a quan- 
tum message u now she encodes it the QEAC defined 
over T-L, obtaining k{u). When she sends it through the 
communication channel, the message interacts with the 
environment. Bob then receives pBoh{k{u)) and Eve re- 
ceives PEvcik{u)) which are given by: 



PBob(M")) = TrE [£^"(fc(u) (g> \0e) {Oe\)\ (13) 

PEve(M«)) - TrB [f ®"(fc(u) <E> \Qe) {Oe\)] (14) 

Since Alice used a QEAC, then the existing dynamical 
symmetry protected the quantum information from the 
interaction with the environment. It means that the joint 
evolution of the system and the environment occurred in 
a decoupled way. Hence, the state pBoh{k{u)) is given 
by: 

PBob(fc(^i)) = TrE ®"(fc(^/) <E> \0e) {Oe\)] (15) 



(kiu)®\OE) {Oe\)aI 



= TrE 

= TrE [fc(u) <^ PE 
= k{u) 



(16) 

(17) 
(18) 



where Eq. (17) is due to the invariance of a state of the 
DFS under the OSR operators. Taking into account the 
Hamiltonian of the quantum system given in Eq. (10) 
and the fact that the system of interest and the environ- 
ment did not interact, it is the case that the environment 
would only suffer from the action of H^;, indicating a uni- 
tary evolution restricted to the environment. 

We will now show how such QEAC protects the infor- 
mation conveyed through the channel from a wiretapper. 

Lemma 1. A QEAC as in Definition 7 over a collective 
noise quantum wiretap channel as in Definition 6 is a 
wiretap code with parameters (n, \U\ , X, p). 

Proof. The proof is straightforward. We have to prove 
that the QEAC satisfies the criteria of Eqs. (6) and (7). 
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Let's first analyze the average decoding error proba- 
bility. Since k{u) is in "H, it did not interact with the 
environment. So, pBob = k(u) as shown in Eqs. (15)- 
(18). It turns out that the decoding is trivial and that 
the message sent by Alice can be perfectly recovered since 
there is a decoding measurement 'Du for every u £U. We 
can see, thus, that there is a negligible average decoding 
error probability for Bob. 

Then we proceed to analyze Eq. (7). Recall that it 
is the average accessible information by Eve which is 
bounded by the Holevo quantity, defined in Eq. (3). We 
will try to obtain the Holevo quantity first. 

Despite the state of the environment pE (vide Eq. 
(17)) is not known, the fact that Alice and Bob used 
states from a DFS guaranteed that the interaction Hamil- 
tonian Mse did not govern the joint evolution of system 
and environment. Instead of that, each system evolved 
completely unitary under its own Hamiltonian, i.e., the 
environment suffered only the action of H^. It implies 
that the environment ended in a pure state. Using this 
result to calculate the Holevo quantity, we have: 

X^"" = 5(pEve(fc("))) - 5I?"'^^('^Evc,fefc(w)) (19) 

k 

^ S{pe) -^PkS{pEvc,kk{u)) (20) 

k 

= 0-^Pfc5(pEve,feM«)) (21) 
k 

It is well known that the Holevo quantity x^™ ^ 0- Since 
S{p) > for any p, and that the probabilities > for 
any k, then it is the case that the remaining term is zero. 
Thus, x^™ = 0. Since the Holevo quantity is an upper 
bound of the accessible information, then Eq. (7) is also 
equal to zero. It concludes the proof. □ 

We can now characterize the secrecy capacity of a 
collective noise quantum wiretap channel. 

Theorem 3. The secrecy capacity of a collective noise 
quantum wiretap channel £, characterized as in Defini- 
tion 6, satisfies 

Cs,DFs(f)=max[x^°^] (22) 

where the maximum is taken over all probability distri- 
butions P over U ; and x^"*^ is the Holevo quantity given 
in Eq. (2). 

Proof. Let a QEAC {K{U), {Vu -.ueU}) be used over 
the channel £. As proved in Lemma 1, it was shown 
that x^™ — 0- Firstly, this fact is substituted into 
Eq. (9). The equality is due to the Holevo-Schumacher- 
Westmoreland theorem [19]. □ 

We can therefore conclude that it is possible to per- 
form unconditionally secure quantum communications 



through wiretapped collective noise quantum channels. 
The unconditional security criterion is satisfied since 
^Evc _ meaning that no information was gathered 
by Eve and that the communication was carried out in 
perfect secrecy. 

The resulting expression of the secrecy capacity of a 
DFS has a relation to the results presented by Schu- 
macher and Westmoreland [15]. These authors show that 
the ability of the quantum channel to send private infor- 
mation is at least as great as its ability to send coherent 
information. Since the information encoded in a DFS 
docs not loose coherence, then its ability to send private 
information is maximal. 



V. EXAMPLE - COLLECTIVE DEPHASING 

To illustrate the results described in the previous sec- 
tion, we will show a detailed example of conveying secret 
classical messages through a collective dephasing quan- 
tum channel £. Let's suppose that qubits on this channel 
couple to the environment in a symmetric manner and 
undergo a dephasing process, defined as: 

|0)^|0) |l)^e^^|l) (23) 

To overcome decoherence, Alice and Bob can take ad- 
vantage from an existing symmetry in the channel. If 
they codify the messages using states that are immune 
to decoherence. Eve can learn nothing from their secret 
messages. To do so, Alice and Bob will use the following 
codification scheme 

|0l) - jOl) - jlO) (24) 

A qubit can, thus, be codified as [V'l) = a [0^) -I- P 

It is interesting to see that does not suffer from the 

effects of decoherence 

£-(|^i))=f (a|0L)+/3|U)) (25) 

= ae"^|01)-f /3e"^|10) (26) 

= e**(a|01)+/3|10)) (27) 

= e^* \M (28) 

= I^l) (29) 

because the overall phase factor e**^ acquired due to the 
dephasing process has no physical significance. 

In this example, the messages sent by Alice are bi- 
nary, so U = {0, 1}. She will encode the bits in the 
following way: k{0) = |01) and k{l) = |10). So, 
K{U) = {[01) , |10)}. Making use of this code to send 
the message u, Alice encodes in the corresponding k{u) 
which she conveys through the channel. We assume that 
the bits and 1 are equally likely and that the environ- 
ment starts in a pure state. 
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To decode the states received Bob will use the following 
POVM: Vq = |01) (01| and Vi = |10) (10|. His Holevo 
quantity in this scenario will be equal to 

^Bob ^ g (^pBobk{u)^ - ^ PuS" (pBob.n) (30) 

u 

= 5(i|01)(01| + i|10)(10|) - J2 ^^(^M) 

(31) 

= 1-0-0 = 1 (32) 

We can conclude that the secrecy capacity for this scena- 
rio is equal to Cs,dfs{^) — 1 bit per channel use. This 
is an example of how to convey secret messages using a 
DFS through a noisy quantum channel with a positive 
rate using a very simple encoding-decoding scheme. 



VI. FINAL REMARKS 

From our analysis, we can conclude that if a quan- 
tum channel is characterized as in Definition 6, then the 
existence of certain symmetries in this channel can be ex- 
ploited to send classical information with unconditional 
security. The encoding using a QEAC can be seen as an 
instance of a wiretap code with the particularity that no 
information is gathered by the wiretapper. 

The secrecy capacity of such channels shown in Eq. 
(22) is equal to the HSW capacity of a quantum channel 
[19]. This is a particular case in which the ability of 



a quantum channel to send secret information can be 
made as large as its capacity to send ordinary classical 
information. 

Regarding the secrecy capacity, Cai et. al [2] argue 
that obtaining a computable secrecy capacity is most 
likely to be even more difficult than obtaining a com- 
putable form of the capacity of a quantum channel for the 
classical information. In our particular case for collective- 
noise quantum wiretap channels, secrecy capacity equals 
the HSW capacity, what turns out to be less difficult to 
compute. 

Due to the technical difficulties to build completely 
closed quantum system [8], the results shown here 
can be applied to build devices that perform uncondi- 
tional secure message exchange even in the presence of 
decoherence. It is very promising in practical applica- 
tions especially considering already existing results re- 
garding the use of DFS in communications [20-22] , par- 
ticularly in long-distance [23] . 

We emphasize that the results presented here cannot 
be generalized to all quantum channels since the condi- 
tions for a DFS are not satisfied by all of them. Zanardi 
and Rasetti [18] argue that the DFS conditions only arise 
in scenarios where collective decoherence takes place. Be- 
sides that, the advantages verified in terms of secrecy and 
rate to this particular case are significant. 

In future work, we suggest the investigation of the im- 
pacts of the results shown in the simplification of certain 
communication protocols that make use of DFS [6, 9, 10]. 
We also suggest the investigation of more general con- 
ditions to the existence of perfect secrecy in quantum 
systems. 
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